659 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Change watch for response header access control allow origin: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fi...
Change watch for response header content disposition: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields tha...
Change watch for response header x dns prefetch control: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields...
Change watch for response header x download options: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that...
Change watch for response header x permitted cross domain policies: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false,...
Change watch for response header timing allow origin: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields tha...
Find the security page of a website: fetches the homepage, scans link text and URLs for security patterns and returns the best candidate URL(s) with the anchor text, plus a confidence. Agents use it to land on the right...
Redact common API keys, tokens and private-key patterns before logging or handoff
Scan untrusted text for common prompt-injection and instruction-override patterns
Review a built-in risky Kubernetes deployment and ClusterRole against Pod Security Standards, RBAC least privilege, secret handling, image pinning, resource bounds, and network exposure without contacting a cluster
Password strength estimate: entropy in bits, character classes used, length, common-pattern penalties (dictionary words, sequences, repeats, dates), an estimated crack time at 10 billion guesses per second and a verdict....
Can this domain be spoofed? Checks whether SPF and DMARC together actually block forged mail: missing DMARC, p=none, pct below 100, SPF +all or ?all, or no SPF at all mean attackers can send email as the domain. Returns...
Prompt injection detection for AI agents: check untrusted text (a web page, email, tool result or user message) before your agent reads it. Returns a verdict safe, suspicious or malicious, a 0 to 100 risk score, the tech...
Prompt injection detection - screen text, a web page or tool output for block, review or allow with a risk score
Audit a built-in vulnerable OpenAPI 3.1 contract against deterministic OWASP API Security Top 10 2023 contract-level checks without active scanning
Detect language, formality and tone of a text with confidence scores. Deterministic heuristics + compact wordlists. Returns iso_639-1 + register. — $0.001 USDC/call on eip155:8453. Pay-per-call via x402 — no API key, no...
Live block height, gas price and fee estimates (transfer, ERC-20 transfer, contract call) for Base or Arc. On Arc fees are quoted directly in USDC.
Executable header forensics for a file URL (defensive reverse-engineering): parses ELF (32/64, LE/BE), PE (32/64) and Mach-O headers — architecture, PIE/ASLR, NX stack, section entropy, imports, compiler/linker timestamp...
Static file triage for any file URL (defensive reverse-engineering): magic/format identification, MD5/SHA-1/SHA-256 hashes, Shannon entropy with packed-region detection, embedded-file signature scan and classified string...
TLS/SSL audit for any host: live handshake — certificate chain details (subject, issuer, SANs, expiry, fingerprint), negotiated protocol and cipher, a TLSv1.0/1.1/1.2/1.3 support matrix, and a graded findings list. Query...
Subdomain enumeration via Certificate Transparency logs (crt.sh, with Cert Spotter fallback): unique subdomains with issue/expire date ranges, grouping by function (www, mail, api, dev, admin, cloud, cdn...), issuing CAs...
security.txt reader (RFC 9116): fetches /.well-known/security.txt (and the legacy /security.txt), parses Contact, Policy, Expires, Encryption, Acknowledgments, Preferred-Languages and Canonical, and flags an expired file...
Web application firewall detection: signs of Cloudflare WAF, AWS WAF, Akamai Kona, Imperva, Sucuri, F5 BIG-IP, Barracuda, Fortinet, ModSecurity and others from response headers, cookies and block-page behaviour on a prob...
Use this before adding or upgrading an npm dependency (OpenZeppelin, solmate, hardhat…), or to triage a lockfile: GitHub/OSV advisories affecting a whole package-lock.json or yarn.lock (or up to 100 listed packages) at t...